Saturday, January 31, 2015

Anonymity leaks within ProtonMail Beta


This is a short commentary on a few overt anonymity gaps in ProtonMail Beta, ver 1.12.  These concerns were emailed to ProtonMail Security on January 21, 2015, and they provided a response that is included at the end.

Monday, January 26, 2015

0daymandias - an original work from #cyberantiquity



                              0daymandias

                                   by Percy Basshe Shelley


               I met a hacker from a proxied land

                    Who said: "Two vast and trunkless commits of stone

               Stand in the desert. Near them on the sand,

                    Half sunk, a shattered botnet lies, whose spam

               And exploit shells and sneer of DNS command

                    Tell that its coder well those payloads read

               Which yet survive, stamped on these XORed things,

                    The IDS that mocked them and the APT that fed.

               And commented out these words appear:

                    'My name is 0daymandias, king of kings:

               Look on my cybers, ye mighty, and despair!'

                    Nothing pwned remains. Round the decay

               Of that colossal takedown, boundless and bare,

                    The lone and level bits stretch far away. 


Wednesday, October 22, 2014

Dear Google: Where's the SSL for Blogger?



I thought enabling HTTPS for this blog would be straightforward, but I painfully found out that a feature I assumed would be a no-brainer is in fact impossible to come by - there's no way to use SSL natively with Blogger.  For those of us that want to serve content via end-to-end encryption Blogger is not a solution until Google decides to bring it up to speed with the rest of its services.

Friday, July 4, 2014

When browsers react - Revoked certificates, Heartbleed and you! - News at 11.

tl;dr:  Don't forget to reissue your new SSL certificate after you revoke your old one.

I tried to connect to https://kutv.com but Chrome 35 was displeased.  Apparently the website's SSL certificate has been revoked, and once that happens ye shall not pass:

Monday, April 14, 2014

IPv6 APN means no VPN for the Galaxy S5 on T-Mobile


After starting up F-Secure's Freedome (my nomination for Android app of the year) on my new Samsung Galaxy S5 I noticed that webpages stopped loading.  In fact, I seemed to have lost all internet connectivity even though Freedome's notification icon indicated it was connected and the 4G/LTE data icon was present.  What gives?